CVE-2012-1219

no score yetEPSS 1.1%

Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the (1) ticket parameter to tickets.php, (2) title parameter to notes.php, or (3) task parameter to todo.php. NOTE: some of these details are obtained from third party information.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-02-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

freelancerkit:freelancerkit

References

http://secunia.com/advisories/47766
http://www.securityfocus.com/bid/51946
http://www.vulnerability-lab.com/get_content.php?id=402
https://exchange.xforce.ibmcloud.com/vulnerabilities/73104
http://secunia.com/advisories/47766

Check your stack JSON